Back Linuxsecurity Ubuntu 20.04 LTS: Important CUPS Denial of Service Advisory USN-7912
A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS Summary: CUPS could be made to stop responding if it received specially crafted network traffic. Software Description: - cups: Common UNIX Printing System(tm) Details: USN-7912-1 fixed vulnerabilities in CUPS. This update provides the corresponding update for Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. Original advisory details: Johannes Meixner and Paul Zirnik discovered that CUPS incorrectly handled clients that send messages slowly. A remote attacker could possibly use this issue to cause CUPS to stop responding, resulting in a denial of service. (CVE-2025-58436) In addition, this update fixes a regression introduced in USN-7897-1 which resulted in certain invalid configuration file directives to cause the CUPS daemon to fail to start.
A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS Summary: CUPS could be made to stop responding if it received specially crafted network traffic. Software Description: - cups: Common UNIX Printing System(tm) Details: USN-7912-1 fixed vulnerabilities in CUPS. This update provides the corresponding update for Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. Original advisory details: Johannes Meixner and Paul Zirnik discovered that CUPS incorrectly handled clients that send messages slowly. A remote attacker could possibly use this issue to cause CUPS to stop responding, resulting in a denial of service. (CVE-2025-58436) In addition, this update fixes a regression introduced in USN-7897-1 which resulted in certain invalid configuration file directives to cause the CUPS daemon to fail to start.
The problem can be corrected by updating your system to the following package versions: Ubuntu 20.04 LTS cups 2.3.1-9ubuntu1.9+esm4 Available with Ubuntu Pro cups-daemon 2.3.1-9ubuntu1.9+esm4 Available with Ubuntu Pro Ubuntu 18.04 LTS cups 2.2.7-1ubuntu2.10+esm10 Available with Ubuntu Pro cups-daemon 2.2.7-1ubuntu2.10+esm10 Available with Ubuntu Pro Ubuntu 16.04 LTS cups 2.1.3-4ubuntu0.11+esm12 Available with Ubuntu Pro cups-daemon 2.1.3-4ubuntu0.11+esm12 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes.
The problem can be corrected by updating your system to the following package versions: Ubuntu 20.04 LTS cups 2.3.1-9ubuntu1.9+esm4 Available with Ubuntu Pro cups-daemon 2.3.1-9ubuntu1.9+esm4 Available with Ubuntu Pro Ubuntu 18.04 LTS cups 2.2.7-1ubuntu2.10+esm10 Available with Ubuntu Pro cups-daemon 2.2.7-1ubuntu2.10+esm10 Available with Ubuntu Pro Ubuntu 16.04 LTS cups 2.1.3-4ubuntu0.11+esm12 Available with Ubuntu Pro cups-daemon 2.1.3-4ubuntu0.11+esm12 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes.
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
